openbsd/src/lib/libcrypto/man/X509_check_purpose.3, branch OPENBSD_7_9_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE2025-06-08T22:40:31+00:00.Lb libcrypto ; OK tb@2025-06-08T22:40:31+00:00schwarze2025-06-08T22:40:31+00:00urn:sha1:8be86af02fed1bda350c8dd14ee064cb66e3b0f5Remove X509_check_trust documentation2024-09-02T08:04:32+00:00tb2024-09-02T08:04:32+00:00urn:sha1:140c84c6a86c052e9c7c169dc8c6c0720fc368caAdjust/fix X509_check_purpose(3) documentation2023-06-25T13:54:58+00:00tb2023-06-25T13:54:58+00:00urn:sha1:60f565f9c257922975134839a278b114b39d004dThe policy tree is no more2023-04-30T14:49:47+00:00tb2023-04-30T14:49:47+00:00urn:sha1:6157358d489492dd9786dc5584d457006b01ee79
Mop up documentation mentioning it or any of its numerous accessors that
almost nothing ever used.
X509_check_purpose.3: incorporate feedback from jsing2022-12-17T12:48:53+00:00tb2022-12-17T12:48:53+00:00urn:sha1:4f30e7935ccf9f6d7cff0669aecfdf86fd5b2d9dDocument extension caching of X509_check_purpose()2022-12-16T18:02:28+00:00tb2022-12-16T18:02:28+00:00urn:sha1:cd13c74f1006cfe752042b24c510330b368487fe
The overwhelming majority of callers of X509_check_purpose() in our tree
pass a purpose of -1. In this case X509_check_purpose() acts as a wrapper
of x509v3_cache_extensions() which makes sanity checks like non-negativity
of ASN.1 integers or canonicity of RFC 3779 extensions as well as checking
uniqueness of extensions.
from schwarze who beat an initial diff of mine into shape
In x509/x509_purp.c rev. 1.11, tb@ fixed X509_check_purpose(3)2021-10-29T14:29:24+00:00schwarze2021-10-29T14:29:24+00:00urn:sha1:bb7be93a674971103621f1843eac3372b6431897
to fail if parsing of a certificate extension failed.
Adjust the documentation accordingly.
OK tb@
new manual page X509_policy_check(3)2021-07-27T13:27:46+00:00schwarze2021-07-27T13:27:46+00:00urn:sha1:4ca71564d45709b8a1933787b6790cf5e3a19069Two new manual pages X509_TRUST_set(3) and X509_check_trust(3)2021-07-24T14:33:14+00:00schwarze2021-07-24T14:33:14+00:00urn:sha1:beb500bad778d2d4b45cd5138dee6fa36d5e8968
documenting ten functions related to X509_TRUST objects,
trust identifiers, and trust indices.
mention the possibility that user-defined purpose identifiers may have2021-07-23T16:22:59+00:00schwarze2021-07-23T16:22:59+00:00urn:sha1:ed4d1d1f52ed65445a46e21736bec4ef29b7d111
been defined or user-supplied checking functions may have been installed